Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
80 results · page 2 of 2
Mar 24, 2022In halo 1.4.14, the function point of uploading the avatar, any file can be uploaded, such as uploading an HTML file, which will cause a stored XSS vulnerabilitCVE-2021-43659 · Other software · Halo · reported by MITREMedium 5.4
In halo 1.4.14, the function point of uploading the avatar, any file can be uploaded, such as uploading an HTML file, which will cause a stored XSS vulnerability.
- Product
- Halo
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 13, 2022In Halo, versions v1.0.0 to v1.4.17 (latest) are vulnerable to Stored Cross-Site Scripting (XSS) in the article tag.CVE-2022-22125 · Other software · halo-dev · reported by vulnerabilitylab@mend.ioMedium 4.8
In Halo, versions v1.0.0 to v1.4.17 (latest) are vulnerable to Stored Cross-Site Scripting (XSS) in the article tag. An authenticated admin attacker can inject arbitrary javascript code that will execute on a victim’s server.
- Product
- halo
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 13, 2022In Halo, versions v1.0.0 to v1.4.17 (latest) are vulnerable to Stored Cross-Site Scripting (XSS) in the profile image.CVE-2022-22124 · Other software · halo-dev · reported by vulnerabilitylab@mend.ioMedium 5.4
In Halo, versions v1.0.0 to v1.4.17 (latest) are vulnerable to Stored Cross-Site Scripting (XSS) in the profile image. An authenticated attacker can upload a carefully crafted SVG file that will trigger arbitrary javascript to run on a victim’s browser.
- Product
- halo
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 13, 2022In Halo, versions v1.0.0 to v1.4.17 (latest) are vulnerable to Stored Cross-Site Scripting (XSS) in the article title.CVE-2022-22123 · Other software · halo-dev · reported by vulnerabilitylab@mend.ioMedium 5.4
In Halo, versions v1.0.0 to v1.4.17 (latest) are vulnerable to Stored Cross-Site Scripting (XSS) in the article title. An authenticated attacker can inject arbitrary javascript code that will execute on a victim’s server.
- Product
- halo
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 12, 2021SSRF vulnerability in Halo <=1.3.2 exists in the SMTP configuration, which can detect the server intranet.CVE-2020-23079 · Other software · Halo · reported by MITREHigh 7.5
SSRF vulnerability in Halo <=1.3.2 exists in the SMTP configuration, which can detect the server intranet.
- Product
- Halo
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 12, 2021File Deletion vulnerability in Halo 0.4.3 via delBackup.CVE-2020-19038 · Other software · Halo · reported by MITRECritical 9.1
File Deletion vulnerability in Halo 0.4.3 via delBackup.
- Product
- Halo
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcwe.mitre.orggithub.com
Jul 12, 2021Incorrect Access Control vulnearbility in Halo 0.4.3, which allows a malicious user to bypass encrption to view encrpted articles via cookies.CVE-2020-19037 · Other software · Halo · reported by MITREMedium 5.3
Incorrect Access Control vulnearbility in Halo 0.4.3, which allows a malicious user to bypass encrption to view encrpted articles via cookies.
- Product
- Halo
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 12, 2021Cross Sie Scripting (XSS) vulnerability in Halo 0.4.3 via CommentAuthorUrl.CVE-2020-18982 · Other software · Halo · reported by MITREMedium 5.4
Cross Sie Scripting (XSS) vulnerability in Halo 0.4.3 via CommentAuthorUrl.
- Product
- Halo
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 12, 2021Remote Code Executon vulnerability in Halo 0.4.3 via the remoteAddr and themeName parameters.CVE-2020-18980 · Other software · Halo · reported by MITRECritical 9.8
Remote Code Executon vulnerability in Halo 0.4.3 via the remoteAddr and themeName parameters.
- Product
- Halo
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 12, 2021Cross Siste Scripting (XSS) vulnerablity in Halo 0.4.3 via the X-forwarded-for Header parameter.CVE-2020-18979 · Other software · Halo · reported by MITREMedium 6.1
Cross Siste Scripting (XSS) vulnerablity in Halo 0.4.3 via the X-forwarded-for Header parameter.
- Product
- Halo
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 20, 2021Cross Site Scripting (XSS) vulnerability in Halo 1.1.3 via post publish components in the manage panel, which lets a remote malicious user execute arbitrary codCVE-2020-21345 · Other software · Halo · reported by MITREMedium 6.1
Cross Site Scripting (XSS) vulnerability in Halo 1.1.3 via post publish components in the manage panel, which lets a remote malicious user execute arbitrary code.
- Product
- Halo
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 30, 2020There is an Arbitrary file deletion vulnerability in halo v1.1.3.CVE-2020-21527 · Other software · Halo · reported by MITREHigh 7.7
There is an Arbitrary file deletion vulnerability in halo v1.1.3. A backup function in the background allows a user, when deleting their backup files, to delete any files on the system through directory traversal.
- Product
- Halo
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 30, 2020An Arbitrary file writing vulnerability in halo v1.1.3.CVE-2020-21526 · Other software · Halo · reported by MITRECritical 9.8
An Arbitrary file writing vulnerability in halo v1.1.3. In an interface to write files in the background, a directory traversal check is performed on the input path parameter, but the startsWith function can be used to bypass it.
- Product
- Halo
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 30, 2020Halo V1.1.3 is affected by: Arbitrary File reading.CVE-2020-21525 · Other software · Halo · reported by MITREHigh 7.5
Halo V1.1.3 is affected by: Arbitrary File reading. In an interface that reads files in halo v1.1.3, a directory traversal check is performed on the input path parameter, but the startsWith function can be used to bypass it.
- Product
- Halo
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 30, 2020There is a XML external entity (XXE) vulnerability in halo v1.1.3, The function of importing other blogs in the background(/api/admin/migrations/wordpress) needCVE-2020-21524 · WordPress plugins & themes · reported by MITRECritical 9.1
There is a XML external entity (XXE) vulnerability in halo v1.1.3, The function of importing other blogs in the background(/api/admin/migrations/wordpress) needs to parse the xml file, but it is not used for security defense, This vulnerability can detect the intranet, read files, enable ddos attacks, etc. exp:https://github.com/halo-dev/halo/issues/423
- What to do
- Update the plugin to the newest version.
Sep 30, 2020A Server-Side Freemarker template injection vulnerability in halo CMS v1.1.3 In the Edit Theme File function.CVE-2020-21523 · Other software · Halo · reported by MITRECritical 9.8
A Server-Side Freemarker template injection vulnerability in halo CMS v1.1.3 In the Edit Theme File function. The ftl file can be edited. This is the Freemarker template file. This file can cause arbitrary code execution when it is rendered in the background. exp: <#assign test="freemarker.template.utility.Execute"?new()> ${test("touch /tmp/freemarkerPwned")}
- Product
- Halo
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 30, 2020An issue was discovered in halo V1.1.3.CVE-2020-21522 · Other software · Halo · reported by MITRECritical 9.8
An issue was discovered in halo V1.1.3. A Zip Slip Directory Traversal Vulnerability in the backend,the attacker can overwrite some files, such as ftl files, .bashrc files in the user directory, and finally get the permissions of the operating system.
- Product
- Halo
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 26, 2020Halo blog 1.2.0 allows users to submit comments on blog posts via /api/content/posts/comments.CVE-2020-19007 · Other software · Halo · reported by MITREMedium 5.4
Halo blog 1.2.0 allows users to submit comments on blog posts via /api/content/posts/comments. The javascript code supplied by the attacker will then execute in the victim user's browser.
- Product
- Halo
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 1, 2020An issue was discovered on Zolo Halo devices via the Linkplay firmware.CVE-2019-15312 · Other software · Linkplay · reported by MITREHigh 8.8
An issue was discovered on Zolo Halo devices via the Linkplay firmware. There is a Zolo Halo DNS rebinding attack. The device was found to be vulnerable to DNS rebinding. Combined with one of the many /httpapi.asp endpoint command-execution security issues, the DNS rebinding attack could allow an attacker to compromise the victim device from the Internet.
- Product
- Linkplay
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordlabs.f-secure.comlabs.mwrinfosecurity.com
Jul 1, 2020An issue was discovered on Zolo Halo devices via the Linkplay firmware.CVE-2019-15311 · Other software · Linkplay · reported by MITRECritical 9.8
An issue was discovered on Zolo Halo devices via the Linkplay firmware. There is Zolo Halo LAN remote code execution. The Zolo Halo Bluetooth speaker had a GoAhead web server listening on the port 80. The /httpapi.asp endpoint of the GoAhead web server was also vulnerable to multiple command execution vulnerabilities.
- Product
- Linkplay
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordlabs.f-secure.comlabs.mwrinfosecurity.com
Dec 25, 2019Halo before 1.2.0-beta.1 allows Server Side Template Injection (SSTI) because TemplateClassResolver.SAFER_RESOLVER is not used in the FreeMarker configuration.CVE-2019-19999 · Other software · Halo · reported by MITREHigh 7.2
Halo before 1.2.0-beta.1 allows Server Side Template Injection (SSTI) because TemplateClassResolver.SAFER_RESOLVER is not used in the FreeMarker configuration.
- Product
- Halo
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 25, 2019Halo 1.1.0 has XSS via a crafted authorUrl in JSON data to api/content/posts/comments.CVE-2019-16890 · Other software · Halo · reported by MITREMedium 5.4
Halo 1.1.0 has XSS via a crafted authorUrl in JSON data to api/content/posts/comments.
- Product
- Halo
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 22, 2019The Android mobile application Halo Home before 1.11.0 stores OAuth authentication and refresh access tokens in a clear text file.CVE-2019-5625 · Other software · Eaton · reported by cve@rapid7.comHigh 7.1
The Android mobile application Halo Home before 1.11.0 stores OAuth authentication and refresh access tokens in a clear text file. This file persists until the user logs out of the application and reboots the device. This vulnerability can allow an attacker to impersonate the legitimate user by reusing the stored OAuth token, thus allowing them to view and change the user's personal information stored in the backend cloud service. The attacker would first need to gain physical control of the Android device or compromise it with a malicious app.
- Product
- HALO Home
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordblog.rapid7.comeaton.com
May 12, 2018ruibaby Halo 0.0.2 has stored XSS via the loginName and loginPwd parameters in a failed login attempt to AdminController.java.CVE-2018-11012 · Other software · Halo · reported by MITREMedium 6.1
ruibaby Halo 0.0.2 has stored XSS via the loginName and loginPwd parameters in a failed login attempt to AdminController.java.
- Product
- Halo
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 12, 2018ruibaby Halo 0.0.2 has stored XSS via the commentAuthor field to FrontCommentController.java.CVE-2018-11011 · Other software · Halo · reported by MITREMedium 6.1
ruibaby Halo 0.0.2 has stored XSS via the commentAuthor field to FrontCommentController.java.
- Product
- Halo
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 24, 2012Cross-site scripting (XSS) vulnerability in the smwfOnSfSetTargetName function in extensions/SMWHalo/includes/SMW_Initialize.php in Semantic Enterprise Wiki (SMCVE-2012-1212 · Other software · Smwplus · reported by MITREMedium 4.3
Cross-site scripting (XSS) vulnerability in the smwfOnSfSetTargetName function in extensions/SMWHalo/includes/SMW_Initialize.php in Semantic Enterprise Wiki (SMW+) 1.5.6, 1.6.0_2 and earlier allows remote attackers to inject arbitrary web script or HTML via the target parameter to index.php/Special:FormEdit. NOTE: some of these details are obtained from third party information.
- Product
- Smw+
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.orgsecunia.com
Apr 28, 2009SQL injection vulnerability in class.eport.php in Tiny Blogr 1.0.0 rc4, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commCVE-2009-1453 · Other software · Anoochit Chalothorn · reported by MITREMedium 6.8
SQL injection vulnerability in class.eport.php in Tiny Blogr 1.0.0 rc4, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the txtUsername parameter (aka the Username field). NOTE: some of these details are obtained from third party information.
- Product
- Tiny Blogr
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecunia.comsecurityfocus.com
May 24, 2005Gearbox Software Halo: Combat Evolved 1.6 allows remote attackers to cause a denial of service (infinite loop) via malformed data.CVE-2005-1741 · Other software · Gearbox Software · reported by MITREMedium 5
Gearbox Software Halo: Combat Evolved 1.6 allows remote attackers to cause a denial of service (infinite loop) via malformed data.
- Product
- Halo Combat Evolved
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordaluigi.altervista.orgsecunia.com
Dec 31, 2004Halo: Combat Evolved 1.05 and earlier allows remote game servers to cause a denial of service (client crash) via a long value in a game server reply, which trigCVE-2004-1539 · Other software · Gearbox Software · reported by MITREMedium 5
Halo: Combat Evolved 1.05 and earlier allows remote game servers to cause a denial of service (client crash) via a long value in a game server reply, which triggers a NULL dereference.
- Product
- Halo Combat Evolved
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 9, 2004Off-by-one error in Halo Combat Evolved 1.04 and earlier allows remote attackers to cause a denial of service (server crash) via a long client response.CVE-2004-1667 · Other software · Gearbox Software · reported by MITREMedium 5
Off-by-one error in Halo Combat Evolved 1.04 and earlier allows remote attackers to cause a denial of service (server crash) via a long client response.
- Product
- Halo Combat Evolved
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordaluigi.altervista.orgmarc.info
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.